Potato Vulnerabilities
Summary
This article explores the family of Potato Vulnerabilities
Overview of Potato Vulnerabilities
Exploitation Techniques
Specific Potato Vulnerabilities
Mitigation
References
- https://jlajara.gitlab.io/Potatoes_Windows_Privesc
- https://foxglovesecurity.com/2016/01/16/hot-potato/
- https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/
- https://hideandsec.sh/books/windows-sNL/page/in-the-potato-family-i-want-them-all
- https://decoder.cloud/2017/12/23/the-lonely-potato/
- http://ohpe.it/juicy-potato/
- https://shenaniganslabs.io/2019/11/12/Ghost-Potato.html
- https://www.pentestpartners.com/security-blog/sweetpotato-service-to-system/
- https://decoder.cloud/2020/05/11/no-more-juicypotato-old-story-welcome-roguepotato/
- https://micahvandeusen.com/the-power-of-seimpersonation/
- https://www.sentinelone.com/labs/relaying-potatoes-another-unexpected-privilege-escalation-vulnerability-in-windows-rpc-protocol/
- https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/
- https://sensepost.com/blog/2022/certpotato-using-adcs-to-privesc-from-virtual-and-network-service-accounts-to-local-system/
- https://decoder.cloud/2023/02/13/localpotato-when-swapping-the-context-leads-you-to-system/
- https://blog.hackvens.fr/articles/CoercedPotato.html
- https://purplesec.us/learn/privilege-escalation-attacks/